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The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS,. 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1. 136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after t he mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

Responsive to communication(s) filed on 24 January 2007 . 
2a)l3 This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1 935 CD. 1 1 , 453 O.G. 21 3. 

Disposition of Claims 

4) S Claim(s) 1-14 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) ^ Claim(s) 1-14 is/are rejected. 

7) D Claim(s)_ is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) Q The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

11) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) ^ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)EI All b)D Some * c)D None of: 

1.13 Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 



Attachment(s) 

1 ) □ Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-41 3) 

2) D Notice of Drattsperson's Patent Drawing Review (PTO-948) PaDer No(s)/Mail Date. . 

3) □ Information Disclosure Statement(s) (PTO/SB/08) 5) □ Notice of Informal Patent Application 

Paper No(s)/Mail Date . 6) □ Other: . 

U.S. Patent and Trademark Offbe 

PTOL-326 (Rev. 08-06) Office Action Summary Part of Paper NoVMail Date 2007041 1 
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DETAILED ACTION 
Response to Amendment 

1 . The Applicant's amendment, filed 24 January 2007, has been received, entered 
into the record, and respectfully and fully considered. 

2. As a result of the amendment, claims 1-3, 7-10 and 14 have been amended. 
Claims 1-14 are now presented for examination. 

3. Any objections or rejections not repeated below for record are withdrawn due to 
Applicant's amendment/explanation. 

Double Patenting 

4. The nonstatutory double patenting rejection is based on a judicially created 
doctrine grounded in public policy (a policy reflected in the statute) so as to prevent the 
unjustified or improper timewise extension of the "right to exclude" granted by a patent 
and to prevent possible harassment by multiple assignees. A nonstatutory 
obviousness-type double patenting rejection is appropriate where the conflicting claims 
are not identical, but at least one examined application claim is not patentably distinct 
from the reference claim(s) because the examined application claim is either anticipated 
by, or would have been obvious over, the reference claim(s). See, e.g., In re Berg, 140 
F.3d 1428, 46 USPQ2d 1226 (Fed. Cir. 1998); In re Goodman, 1 1 F.3d 1046, 29 
USPQ2d 2010 (Fed. Cir. 1993); In re Longi, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 
1985); In re Van Ornum, 686 F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, 422 
F.2d 438, 164 USPQ 619 (CCPA 1970); and In re Thorington, 418 F.2d 528, 163 
USPQ 644 (CCPA 1969). 

A timely filed terminal disclaimer in compliance with 37 CFR 1 .321 (c) or 1 .321 (d) 
may be used to overcome an actual or provisional rejection based on a nonstatutory 
double patenting ground provided the conflicting application or patent either is shown to 
be commonly owned with this application, or claims an invention made as a result of 
activities undertaken within the scope of a joint research agreement. 

Effective January 1, 1994, a registered attorney or agent of record may sign a 
terminal disclaimer. A terminal disclaimer signed by the assignee must fully comply with 
37 CFR 3.73(b). 

5. Claims 1, 3, 7-8, 10 and 14 are provisionally rejected on the ground of nonstatutory 
obviousness-type double patenting as being unpatentable over claims 1 and 12 of co- 
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pending application 10/615,103. (The examiner allows the co-pending application 
10/615,103). Although the conflicting claims are not identical, they are patentably 
distinct from each other (See Claim-Comparison Table below), the added limitation to 
claims 1, 3, 7, 10 and 14 a of the instant application only disclose a remote display 
which is obvious to one of ordinary skill in the art and well known that a remote display 
goes back and displays at the partner location. Further, the new limitations "multiple" 
and "isolated" are added to claims 3 ,7, 10 and 14, which do not add patentable weight 
to be distinct from co-pending application 10/615,103. Furthermore, on page 17 of the 
remark of the co-pending application 10/615,103 (The examiner allows the co-pending 
application 10/615,103), the applicant clearly set forth "This application is directed to 
an improvement of the related application serial no. 10/615,263 The improvement 
a license proxy software that is provided that will act as a relay agent and route all 
connections from contractor zone into the Intranet". Additionally, any other limitations of 
the instant application are all anticipated by the allowed application 10/615,103. 
Therefore, Claims 1, 3, 7-8, 10 and 14 of the instant application are not patentably 
distinct from the co-pending application 10/615,103 and as such are unpatentable for 
obvious-type double patenting (In re Goodman (CAFC) 29 USPQ2D 2010 (12/3/1993)). 

Claim-Comparison Table 



Claim 


Application 10/615,103 


Claim 


Application 10/615,263 
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1 


A method for providing secure 


1 


A method for providing secure 




access of a partner to the 




access of a partner to the 




development 




development 




environment of an owner 




environment of another partner 




comprising the steps of: starting 




comprising the steps of: starting a 




a VPN tunnel 




VPN tunnel 




between workstations to 




between workstations to 




establish a secure encrypted 




establish a secure encrypted 




tunnel end to end wherein 




tunnel end to end wherein 




each partner is identified with a 




each partner is identified with a 




different VPN group/password; 




different VPN group/password; 




starting a 




starting a 




session by the partner in a Web 




session by the partner in a Web 




page on a portal machine that 




page on a portal machine that 




authenticates 




authenticates 




through LDAP a user 




through LDAP the user 




identification and password of 




identification and password of a 




user; routing the session to an 




user; routing the session to an 




engagement box depending on 




engagement box depending on 




the user where the engagement 




the user where the engagement 




boxes each include a server with 




box includes a server with 




an operating system and are on 




an operating system and are on 
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network segments separated by 




network segments separated by 




firewall boxes with another 




firewall boxes with another 




logon/password and is 




logon/password and is 




validated through second LDAP 




validated thru second LDAP 




and wherein all users of the same 




and wherein all users of the same 




partner are all launching on the 




partner are all launching on the 




same engagement box; 




same engagement box; 




accessing data and applications 




accessing data and applications 




from an engagement box on 




from that engagement box on 




Network File system storage 




Network File system storage 




A m M m + m mm mmm- Mm mwm- 

authenticated second LDAP 




authenticated second LDAP to get 




to a design zone common 




benefit a common 




resource of said owner with a big 




resource segment of a big 




compute farm composed of many 




compute farm composed of many 




high-end servers in a secure way; 




high-end servers in a secure way; 




submitting batch or interactive 




submitting batch or interactive 




jobs to said design zone; and 




jobs to said server farm on a 




providing for each application host 




common resource segment so data 




in said design zone a highly secure 




input and data output on the server 




access to EDA licenses from 




farm remains on the common 




license servers with dynamically 




resource segment; and a display is 




changing access port of said owner 




sent back to appropriate partner's 
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inside an Intranet of said owner 




engagement box and then a remote 




without opening all such access 




display at the partner location. 




ports for all hosts and creating a 








security risk comprising the steps 








of: providing a license proxy server 








in said design zone that dynamically 








determines the address of the 








changing access ports of the 








license servers in said Intranet; and 








said application hosts inside said 








design zone contacting the license 








proxy server which in turn fetches 








the appropriate EDA licenses from 








said license servers in said Intranet 

wWIU Mwwl Iww sJUl V will wwl 1 \_4 || III C4I Ivl 








of said owner. 






12 


A system for providing a secure 


8 


A system for providing highly 




access of one or more partners to 




secure access of a partner to 




the development environment of 




the development environment of 




an owner comprising: 




another partner comprising: 




Means for starting a VPN tunnel 




Means for providing a VPN tunnel 
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between workstations to establish 




between workstations to establish 




a secure encrypted tunnel end to 




a secure encrypted tunnel end to 




end wherein each partner is 


• 


end wherein each partner is 




identified with a different VPN 




identified with a different VPN 




group/password; 




group/password; 




Means for starting a session by 




Means for starting a session by the 




the partner in a Web page on a 




partner in a Web page on a 




portal machine that authenticates 




portal machine that authenticates 




through LDAP (Lightweight Directory 




thru LDAP 




Access Protocol) a user 




user 




identification and password of a 




identification and password of a 




user; 




user; 




Means for routing the session to 




Means for routing the session to an 




an engagement box depending on 




engagement box depending on the 




the user where the engagement 




person where engagement 




boxes each 




boxes 




include a server with a user where 




including 




the engagement boxes each 




said engagement box 




include a server with an operating 




including a server with an operating 




system and are on network 




system are on network 




segments separated by firewall 




segments separated by firewall 




boxes with another 




boxes with another 
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logon/password and is validated 




logon/password and is validated 




through LDAP and wherein all 




* ■ ft*^ a mm* a a * ■ ■ 

thru second LDAP and wherein all 




users of the same partner are all 




users of the same partner are all 




launching on the same 




launching on the same 




engagement box; 




engagement box; 




Means for accessing data and 




means for accessing data and 




applications from an engagement 




applications from that engagement 




box on Network File system 




box on Newtwork File system 




storage authenticated second 




storage authenticated second 




LDAP to a design zone common 




LDAP to get benefit of 




resource of said owner with a big 




a big 




compute farm composed of many 




compute farm composed of many 




high-end servers in a secure way; 




high-end servers in a secure way. 




Means for submitting batch or 








interactive jobs to said design zone; 








and 








Means for providing for each 








application host in said design zone 








a hiahlv secure access to EDA 








licenses from license servers with 








dynamically changing access ports 








of said owner inside an Intranet of 
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said owner without opening all such 








access ports for all hosts and 








creating security risk comprising: 








A license proxy server in said design 








zone that determines the dynamically 








changing access ports of the license 








servers in said Intranet; and said 








application hosts inside said design 








zone contacting the license proxy 








^prx/pr whirh in turn fetches the 








appropriate EDA licenses from said 








licenses servers in said Intranet of 








said owner. 






1 


A method for providing secure 


3, 


A method of enabling a collaborative 




access of a partner to 


7 


network with partners without 




thedevelopment 




compromising Intellectual Property 




environment of an owner 








comprising the steps of: starting 




comprising the steps of: starting 




a VPN tunnel 




a VPN tunnel 




between workstations to 




between workstations to 




establish a secure encrypted 




establish a secure encrypted 




tunnel end to end wherein 




tunnel end to end wherein 
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each partner is identified with a 




each partner is identified with a 




different VPN group/password; 




different VPN group/password; 




starting a 




starting a 




session by the partner in a Web 




session by the partner in a Web 




page on a portal machine that 




page on a portal machine that 




authenticates 




authenticates 




through LDAP a user 




through LDAP user 




identification and password of 




identification and password of a 




user; routing the session to an 




user; routing the session to an 




engagement box depending on 




engagement box depending on the 




the user where the engagement 




user where the engagement 




boxes each include a server with 




boxes each include a server with 




an operating system and are on 




an operating system and are on 




network segments separated by 




network segments separated by 




firewall boxes with another 




firewall boxes with another 




logon/password and is 




logon/password and is 




validated through second LDAP 




validated thru second LDAP and 




and wherein all users of the same 




wherein all users of the same 




partner are all launchina on the 




partner are all launching on the 




same engagement box; 




same engagement box; 




accessing data and applications 




accessing data and applications 




from an engagement box on 




from that engagement box on 
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Network File system storage 




Network File system storage 




authenticated second LDAP 




Authenticated second LDAP to get 




to a design zone common 




benefit of a common 




resource of said owner with a big 




resource zone a big 




compute farm composed of many 




compute farm composed of many 




high-end servers in a secure way; 




high-end servers in a secure way 




submitting batch or interactive 




submitting batch or interactive 




jobs to said design zone; and 




jobs to a server on said common 




providing for each application host 




resource computing zone so data 




in said design zone a highly secure 




input and data output on the server on 




access to EDA licenses from 




said common resource remains on 




license servers with dynamically 




said common resource computing 




changing access port of said owner 




zone but just a remote display is going 




inside an Intranet of said owner 




back to the engagement box of the 




without opening all such access 




partner and then remote display at the 




ports for all hosts and creating a 




partner location 




security risk comprising the steps 








of: providing a license proxy server 








in said design zone that dynamically 








determines the address of the 








changing access ports of the 








license servers in said Intranet; and 
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said application hosts inside said 








design zone contacting the license 








proxy server which in turn fetches 








the appropriate EDA licenses from 








said license servers in said Intranet 








of said owner. 






12 


A system for providing a secure 


10, 


A a f II' III i * 

A system for enabling collaboration 




access of one or more partners to 


14 


by an owner of a collaborative network 




the development environment of an 




with partners such as sub-contractors, 




owner comprising: 




customers. . . comprising: 




Means for starting a VPN tunnel 




Means for providing a VPN tunnel 




between workstations to 




Between workstations to 




establish a secure encrypted 




Establish a secure encrypted 




tunnel end to end wherein each 




tunnel end to end wherein each 




partner is identified with a 




partner is identified with a 




different VPN group/password; 




different VPN group/password; 




Means for starting a session by 




Means for starting a session by 




the partner in a Web page on a 




The partner in a Web page on a 




portal machine that authenticates 




Portal machine that authenticates 




through LDAP (Lightweight 




Thru LDAP 
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Directory Access Protocol) a user 




user 




identification and password of a 




identification and password of a 




user; 




user; 




Means for routing the session to 




means for routing the session to 




an engagement box depending 




an engagement box depending 




on the user where the 




on the person where the 




engagement boxes each include 




engagement boxes each include a 




a server with a user where the 




server with a user where the 




engagement boxes each include 




engagement boxes each include a 




a server with an operating 




server with an operating system 




system and are on network 




and are on network 




segments separated by firewall 




segments separated by firewall 




boxes with another 




boxes with another 




logon/password and is validated 




logon/password and is validated 




through second LDAP and 




through second LDAP and wherein 




wherein all users of the same 




all users of the same partner are all 




partner are all launching on the 




launching on the 




same engagement box; 




same engagement box; 




Means for accessing data and 




Means for accessing data and 




applications from an engagement 




applications from an engagement 




box on Network File system 




box on Network File system 




storage authenticated second 




storage authenticated second 
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LDAP to a design zone common 




LDAP to get benefit of common 




resource of said owner with a big 




resource a big 




compute farm composed of many 




compute farm composed of many 




high-end servers in a secure way; 




high-end servers in a secure way. 




Means for submitting batch or 




Means for submitting batch or 




interactive jobs to said design 




Interactive jobs to a server on said 




zone; and 




common resource zone 




Means for providing for each 








application host in said design zone 








a highly secure access to EDA 








licenses from license servers with 








dynamically changing access ports 








of said owner inside an Intranet of 








said owner without opening all such 








access ports for all hosts and 








creating security risk comprising: 








A license proxy server in said 








design zone that determines the 








dvnamicallv chanaina access oorts 








of the license servers in said 








Intranet; and said application hosts 








inside said design zone contacting 
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the license oroxv server which in 
turn fetches the appropriate EDA 
licenses from said licenses servers 
in said Intranet of said owner. 















Allowable Subject Matter 

6. This is a provisional obviousness-type double patenting rejection because the 
conflicting claims have not in fact been patented. 

7. Claims 1-14 would be allowable by filling a timely Terminal Disclaimer to 
overcome the Double patenting rejection(s). The reason for allowance is outlined 
clearly from the record of application 10/165,103, the examiner issues allowance on. 

Conclusion 

8. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
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the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to April Y. Shan whose telephone number is (571) 270- 
1014. The examiner can normally be reached on Monday - Friday, 8:00 a.m. - 5:00 
p.m., EST. 



supervisor, Kim Y. Vu can be reached on (571 ) 272-3859. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-91 99 (IN USA OR CANADA) or 571 -272-1000. 



Contact Information 



If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
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